fix(DATAGO-136673): bump urllib3 2.6.3 -> 2.7.0 for CVE-2026-44431/44432

[ziyanwan]

Summary

• Bumps urllib3 pin from 2.6.3 to 2.7.0 to fix two BLOCKING FOSSA vulnerabilities flagged on the SAM vuln dashboard:
  • CVE-2026-44431 (HIGH)
  • CVE-2026-44432 (HIGH)
• Strict urllib3==2.6.3 pin currently caps the version downstream in solace-agent-mesh (and enterprise), preventing the fix from being picked up via uv lock. Bumping here unblocks the downstream fix.

Test plan

• CI passes
• Downstream solace-agent-mesh uv lock resolves urllib3 to 2.7.0 after this is merged and version bumped

🤖 Generated with Claude Code

[github-actions]

⚠️ FOSSA Guard: Licensing (SolaceLabs_solace-ai-connector) • 1 flagged • 1 issue

Compared against main (15076b6a0462c638f721e97e790c0105c616bc21) • 2 new, 9 total (9 in base)

ℹ️ Privacy mode enabled - detailed violation information hidden.

• Flagged by Policy: 1 issue(s)
• Other: 1 issue(s)

Scan Report | View Details in FOSSA

[github-actions]

✅ FOSSA Guard: Vulnerability (SolaceLabs_solace-ai-connector) • PASSED

Compared against main (15076b6a0462c638f721e97e790c0105c616bc21) • 0 new, 1 total (3 in base)

Scan Report | View Details in FOSSA

[sonarqube-solacecloud]

Quality Gate passed

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
No data about Duplication

See analysis details on SonarQube